Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: +PzSjNdj/hFDpmnRnJwLKMoPP1MdAXl7drMgk5VsQBY=
Subject key identifier: 80:5E:AA:22:0F:77:3C:FF:B4:C4:37:3C:32:1A:25:7B:81:38:A2:7D
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 019749D588E0E49BBCB1C66A0951A214C677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 10:00:20 +0000
Manifest this update: Sat 07 Jun 2025 10:00:20 +0000
Manifest next update: Sun 08 Jun 2025 10:00:20 +0000
Files and hashes: 1: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=)
2: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: H6bYDKeFlGHEvcsZZ6wDWEBklpNDOf5B9iTSFgLNh5Q=)
3: r2ZORJxSeCIu6eCO87hDb9jfS0s.roa (hash: kW/Le+50yBjcga1Wh8Y1h6UD2loMcqNEMFpy4Zq+anY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:88:e0:e4:9b:bc:b1:c6:6a:09:51:a2:14:c6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Jun 7 10:00:20 2025 GMT
Not After : Jun 8 10:00:20 2025 GMT
Subject: CN=805eaa220f773cffb4c4373c321a257b8138a27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bd:fc:2d:a1:dd:87:33:bf:d5:ec:e6:3c:ae:
a3:bf:15:31:ab:5f:e7:5e:b5:33:e4:f8:c3:86:8b:
be:18:76:e9:80:2d:a7:a4:ea:c4:7b:d7:36:8f:88:
e0:28:25:20:33:b8:ee:0e:b4:af:c8:3b:73:90:b8:
74:df:59:e2:68:60:d7:ad:90:40:6a:36:0e:70:54:
47:4b:5d:d2:78:af:5e:8d:ce:1c:74:6d:c0:50:ed:
77:4f:98:b4:ac:2c:16:96:df:4e:50:a7:50:16:90:
4d:63:03:7a:6a:98:b6:e0:78:14:39:9c:4c:d0:2d:
98:c7:4c:f5:8e:0e:0b:c4:89:79:96:10:df:f5:9d:
97:5d:86:a6:fa:89:da:68:11:95:6e:d3:02:4a:02:
23:76:c9:35:c7:3e:cc:32:33:2d:1f:25:e0:13:ef:
b9:ed:b6:6f:9e:a5:6e:28:4a:90:24:d3:4b:9e:e0:
15:69:93:7b:80:c9:73:b5:0f:48:2a:ad:22:ac:d0:
b7:4d:79:35:83:8b:16:61:58:5e:ed:d3:70:05:f7:
d6:86:aa:62:bd:62:6f:56:01:a7:5d:2b:a8:00:0e:
6c:66:8c:c3:38:2c:4a:fa:7f:d9:a6:07:f1:a4:e9:
4d:01:55:8f:d8:a6:d5:3b:61:6f:72:1a:77:db:78:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5E:AA:22:0F:77:3C:FF:B4:C4:37:3C:32:1A:25:7B:81:38:A2:7D
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:06:a5:ce:1a:b2:be:86:fc:7d:77:c1:ac:5e:59:45:6a:2d:
0f:b4:fc:0a:86:91:63:5b:cc:50:c4:c4:cc:07:21:4d:49:96:
15:0d:3a:83:d5:5f:3f:08:ce:ec:9f:4d:48:d9:3d:ab:a9:ed:
b9:3b:af:a8:7f:84:11:88:04:a8:09:58:a3:8d:7c:a3:2a:b6:
6a:82:36:08:05:b2:2e:25:8b:be:ad:02:7a:89:2f:54:cd:a8:
d7:bc:9d:5b:ca:e3:ca:82:3f:a4:2a:63:ec:4d:dc:0d:5f:f8:
03:57:7e:ae:f2:de:29:46:07:63:89:64:af:96:b0:c0:5c:bb:
a2:c5:d2:4a:5c:b5:a1:fc:89:af:e4:5b:b2:b9:23:86:b2:02:
dd:71:59:df:fa:f3:35:31:9c:ab:58:b7:94:23:a2:23:01:e6:
ad:ad:cb:ea:04:86:eb:b7:64:56:2a:d4:49:36:95:34:f7:5e:
16:94:33:5f:b8:7b:72:23:54:06:d8:f5:85:7a:7a:93:2e:19:
07:78:48:82:bc:37:bb:7f:35:e2:ca:49:34:5d:a0:0b:2a:bc:
15:fc:19:52:84:8c:09:a3:80:b3:f1:48:10:49:cd:43:72:72:
66:e9:95:e6:c0:21:3b:b5:1d:88:ee:9a:b5:a5:a7:2e:7f:77:
d6:0f:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:59:35 2025 by rpki-client